s.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-encoding: gzip x-github-request-id: AAC4:6EB9:8D39D:C06C3:69A756FE server: github.com X-Firefox-Spdy: h2